tls error key negotiation failed

Daimroc

I am using OpenVPn in windows 10. I have a config folder with the cer and all the needed files. I have a computer in which this works fine, but when I install in a fresh windows 10 isntallarion OpenVpn and I copy the config folder from my first computer to this new one, I get this error.

I discard problems in the server, because the first computer can connect to the server.

I discard problems with the firewall in the second client computer, because I disabled the fireall and the problem persists.

I checck that the network adapter in the new computer has the correct name, the same that I use in the config file and the same that I have in the first computer.

I run OpenVpn GUI with admin privileges.

I think that I can discard problems in the config file because it works in the first computer, so I guess that the problem has to be with the windows configuration, but I don't know what else I can test.

This is my server configuration:

local 192.168.0.2

port 1194

proto udp

dev tun

dev-node OpenVPN


ca ca.crt
cert server.crt
key server.key  # This file should be kept secret


dh dh4096.pem


server 10.10.0.0 255.255.255.0


ifconfig-pool-persist ipp.txt


client-config-dir ccd

route 10.10.0.0 255.255.255.0

push "dhcp-option DNS 10.10.0.1"
push "dhcp-option WINS 10.10.0.1"


client-to-client


keepalive 10 120


tls-auth ta.key 0 # This file is secret

cipher AES-256-CBC   # AES

max-clients 5

persist-key
persist-tun

status openvpn-status.log

verb 3

This is my config of the client:

client

dev tun

dev-node OpenVpn

proto udp

remote myServer.com 1194

resolv-retry infinite

nobind

persist-key
persist-tun

ca ca.crt
cert MyClient1.crt
key MyClient1.key

remote-cert-tls server

tls-auth ta.key 1

cipher AES-256-CBC   # AES

verb 3

Thanks.

TinCanTech

Please set --verb 4 in both your config files and then post your logs (remove your private data)

Daimroc

Thanks for your help.

This is my log of the client that fails:

Tue Jun 07 12:57:12 2016   pkcs11_protected_authentication = DISABLED
Tue Jun 07 12:57:12 2016   pkcs11_protected_authentication = DISABLED
Tue Jun 07 12:57:12 2016   pkcs11_private_mode = 00000000
Tue Jun 07 12:57:12 2016   pkcs11_private_mode = 00000000
Tue Jun 07 12:57:12 2016   pkcs11_private_mode = 00000000
Tue Jun 07 12:57:12 2016   pkcs11_private_mode = 00000000
Tue Jun 07 12:57:12 2016   pkcs11_private_mode = 00000000
Tue Jun 07 12:57:12 2016   pkcs11_private_mode = 00000000
Tue Jun 07 12:57:12 2016   pkcs11_private_mode = 00000000
Tue Jun 07 12:57:12 2016   pkcs11_private_mode = 00000000
Tue Jun 07 12:57:12 2016   pkcs11_private_mode = 00000000
Tue Jun 07 12:57:12 2016   pkcs11_private_mode = 00000000
Tue Jun 07 12:57:12 2016   pkcs11_private_mode = 00000000
Tue Jun 07 12:57:12 2016   pkcs11_private_mode = 00000000
Tue Jun 07 12:57:12 2016   pkcs11_private_mode = 00000000
Tue Jun 07 12:57:12 2016   pkcs11_private_mode = 00000000
Tue Jun 07 12:57:12 2016   pkcs11_private_mode = 00000000
Tue Jun 07 12:57:12 2016   pkcs11_private_mode = 00000000
Tue Jun 07 12:57:12 2016   pkcs11_cert_private = DISABLED
Tue Jun 07 12:57:12 2016   pkcs11_cert_private = DISABLED
Tue Jun 07 12:57:12 2016   pkcs11_cert_private = DISABLED
Tue Jun 07 12:57:12 2016   pkcs11_cert_private = DISABLED
Tue Jun 07 12:57:12 2016   pkcs11_cert_private = DISABLED
Tue Jun 07 12:57:12 2016   pkcs11_cert_private = DISABLED
Tue Jun 07 12:57:12 2016   pkcs11_cert_private = DISABLED
Tue Jun 07 12:57:12 2016   pkcs11_cert_private = DISABLED
Tue Jun 07 12:57:12 2016   pkcs11_cert_private = DISABLED
Tue Jun 07 12:57:12 2016   pkcs11_cert_private = DISABLED
Tue Jun 07 12:57:12 2016   pkcs11_cert_private = DISABLED
Tue Jun 07 12:57:12 2016   pkcs11_cert_private = DISABLED
Tue Jun 07 12:57:12 2016   pkcs11_cert_private = DISABLED
Tue Jun 07 12:57:12 2016   pkcs11_cert_private = DISABLED
Tue Jun 07 12:57:12 2016   pkcs11_cert_private = DISABLED
Tue Jun 07 12:57:12 2016   pkcs11_cert_private = DISABLED
Tue Jun 07 12:57:12 2016   pkcs11_pin_cache_period = -1
Tue Jun 07 12:57:12 2016   pkcs11_id = '[UNDEF]'
Tue Jun 07 12:57:12 2016   pkcs11_id_management = DISABLED
Tue Jun 07 12:57:12 2016   server_network = 0.0.0.0
Tue Jun 07 12:57:12 2016   server_netmask = 0.0.0.0
Tue Jun 07 12:57:12 2016   server_network_ipv6 = ::
Tue Jun 07 12:57:12 2016   server_netbits_ipv6 = 0
Tue Jun 07 12:57:12 2016   server_bridge_ip = 0.0.0.0
Tue Jun 07 12:57:12 2016   server_bridge_netmask = 0.0.0.0
Tue Jun 07 12:57:12 2016   server_bridge_pool_start = 0.0.0.0
Tue Jun 07 12:57:12 2016   server_bridge_pool_end = 0.0.0.0
Tue Jun 07 12:57:12 2016   ifconfig_pool_defined = DISABLED
Tue Jun 07 12:57:12 2016   ifconfig_pool_start = 0.0.0.0
Tue Jun 07 12:57:12 2016   ifconfig_pool_end = 0.0.0.0
Tue Jun 07 12:57:12 2016   ifconfig_pool_netmask = 0.0.0.0
Tue Jun 07 12:57:12 2016   ifconfig_pool_persist_filename = '[UNDEF]'
Tue Jun 07 12:57:12 2016   ifconfig_pool_persist_refresh_freq = 600
Tue Jun 07 12:57:12 2016   ifconfig_ipv6_pool_defined = DISABLED
Tue Jun 07 12:57:12 2016   ifconfig_ipv6_pool_base = ::
Tue Jun 07 12:57:12 2016   ifconfig_ipv6_pool_netbits = 0
Tue Jun 07 12:57:12 2016   n_bcast_buf = 256
Tue Jun 07 12:57:12 2016   tcp_queue_limit = 64
Tue Jun 07 12:57:12 2016   real_hash_size = 256
Tue Jun 07 12:57:12 2016   virtual_hash_size = 256
Tue Jun 07 12:57:12 2016   client_connect_script = '[UNDEF]'
Tue Jun 07 12:57:12 2016   learn_address_script = '[UNDEF]'
Tue Jun 07 12:57:12 2016   client_disconnect_script = '[UNDEF]'
Tue Jun 07 12:57:12 2016   client_config_dir = '[UNDEF]'
Tue Jun 07 12:57:12 2016   ccd_exclusive = DISABLED
Tue Jun 07 12:57:12 2016   tmp_dir = 'C:\...\Temp\'
Tue Jun 07 12:57:12 2016   push_ifconfig_defined = DISABLED
Tue Jun 07 12:57:12 2016   push_ifconfig_local = 0.0.0.0
Tue Jun 07 12:57:12 2016   push_ifconfig_remote_netmask = 0.0.0.0
Tue Jun 07 12:57:12 2016   push_ifconfig_ipv6_defined = DISABLED
Tue Jun 07 12:57:12 2016   push_ifconfig_ipv6_local = ::/0
Tue Jun 07 12:57:12 2016   push_ifconfig_ipv6_remote = ::
Tue Jun 07 12:57:12 2016   enable_c2c = DISABLED
Tue Jun 07 12:57:12 2016   duplicate_cn = DISABLED
Tue Jun 07 12:57:12 2016   cf_max = 0
Tue Jun 07 12:57:12 2016   cf_per = 0
Tue Jun 07 12:57:12 2016   max_clients = 1024
Tue Jun 07 12:57:12 2016   max_routes_per_client = 256
Tue Jun 07 12:57:12 2016   auth_user_pass_verify_script = '[UNDEF]'
Tue Jun 07 12:57:12 2016   auth_user_pass_verify_script_via_file = DISABLED
Tue Jun 07 12:57:12 2016   client = ENABLED
Tue Jun 07 12:57:12 2016   pull = ENABLED
Tue Jun 07 12:57:12 2016   auth_user_pass_file = '[UNDEF]'
Tue Jun 07 12:57:12 2016   show_net_up = DISABLED
Tue Jun 07 12:57:12 2016   route_method = 0
Tue Jun 07 12:57:12 2016   block_outside_dns = DISABLED
Tue Jun 07 12:57:12 2016   ip_win32_defined = DISABLED
Tue Jun 07 12:57:12 2016   ip_win32_type = 3
Tue Jun 07 12:57:12 2016   dhcp_masq_offset = 0
Tue Jun 07 12:57:12 2016   dhcp_lease_time = 31536000
Tue Jun 07 12:57:12 2016   tap_sleep = 0
Tue Jun 07 12:57:12 2016   dhcp_options = DISABLED
Tue Jun 07 12:57:12 2016   dhcp_renew = DISABLED
Tue Jun 07 12:57:12 2016   dhcp_pre_release = DISABLED
Tue Jun 07 12:57:12 2016   dhcp_release = DISABLED
Tue Jun 07 12:57:12 2016   domain = '[UNDEF]'
Tue Jun 07 12:57:12 2016   netbios_scope = '[UNDEF]'
Tue Jun 07 12:57:12 2016   netbios_node_type = 0
Tue Jun 07 12:57:12 2016   disable_nbt = DISABLED
Tue Jun 07 12:57:12 2016 OpenVPN 2.3.11 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on May 10 2016
Tue Jun 07 12:57:12 2016 Windows version 6.2 (Windows 8 or greater) 64bit
Tue Jun 07 12:57:12 2016 library versions: OpenSSL 1.0.1t  3 May 2016, LZO 2.09
Tue Jun 07 12:57:12 2016 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Jun 07 12:57:12 2016 Need hold release from management interface, waiting...
Tue Jun 07 12:57:12 2016 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Jun 07 12:57:12 2016 MANAGEMENT: CMD 'state on'
Tue Jun 07 12:57:12 2016 MANAGEMENT: CMD 'log all on'
Tue Jun 07 12:57:13 2016 MANAGEMENT: CMD 'hold off'
Tue Jun 07 12:57:13 2016 MANAGEMENT: CMD 'hold release'
Tue Jun 07 12:57:13 2016 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Tue Jun 07 12:57:13 2016 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jun 07 12:57:13 2016 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jun 07 12:57:13 2016 Control Channel MTU parms [ L:1557 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Jun 07 12:57:13 2016 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Jun 07 12:57:13 2016 MANAGEMENT: >STATE:1465297033,RESOLVE,,,
Tue Jun 07 12:57:13 2016 Data Channel MTU parms [ L:1557 D:1450 EF:57 EB:12 ET:0 EL:3 ]
Tue Jun 07 12:57:13 2016 Local Options String: 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Tue Jun 07 12:57:13 2016 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Tue Jun 07 12:57:13 2016 Local Options hash (VER=V4): 'ed844052'
Tue Jun 07 12:57:13 2016 Expected Remote Options hash (VER=V4): '8a244582'
Tue Jun 07 12:57:13 2016 UDPv4 link local: [undef]
Tue Jun 07 12:57:13 2016 UDPv4 link remote: [AF_INET]77.27.58.137:1194
Tue Jun 07 12:57:13 2016 MANAGEMENT: >STATE:1465297033,WAIT,,,

And this is the log of the server:

Tue Jun 07 13:03:39 2016 us=633463 Current Parameter Settings:
Tue Jun 07 13:03:39 2016 us=633463   config = 'server.ovpn'
Tue Jun 07 13:03:39 2016 us=633463   mode = 1
Tue Jun 07 13:03:39 2016 us=633463   show_ciphers = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   show_digests = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   show_engines = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   genkey = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   key_pass_file = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   show_tls_ciphers = DISABLED
Tue Jun 07 13:03:39 2016 us=633463 Connection profiles [default]:
Tue Jun 07 13:03:39 2016 us=633463   proto = udp
Tue Jun 07 13:03:39 2016 us=633463   local = '192.168.0.2'
Tue Jun 07 13:03:39 2016 us=633463   local_port = 1194
Tue Jun 07 13:03:39 2016 us=633463   remote = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   remote_port = 1194
Tue Jun 07 13:03:39 2016 us=633463   remote_float = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   bind_defined = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   bind_local = ENABLED
Tue Jun 07 13:03:39 2016 us=633463   connect_retry_seconds = 5
Tue Jun 07 13:03:39 2016 us=633463   connect_timeout = 10
Tue Jun 07 13:03:39 2016 us=633463   connect_retry_max = 0
Tue Jun 07 13:03:39 2016 us=633463   socks_proxy_server = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   socks_proxy_port = 0
Tue Jun 07 13:03:39 2016 us=633463   socks_proxy_retry = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   tun_mtu = 1500
Tue Jun 07 13:03:39 2016 us=633463   tun_mtu_defined = ENABLED
Tue Jun 07 13:03:39 2016 us=633463   link_mtu = 1500
Tue Jun 07 13:03:39 2016 us=633463   link_mtu_defined = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   tun_mtu_extra = 0
Tue Jun 07 13:03:39 2016 us=633463   tun_mtu_extra_defined = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   mtu_discover_type = -1
Tue Jun 07 13:03:39 2016 us=633463   fragment = 0
Tue Jun 07 13:03:39 2016 us=633463   mssfix = 1450
Tue Jun 07 13:03:39 2016 us=633463   explicit_exit_notification = 0
Tue Jun 07 13:03:39 2016 us=633463 Connection profiles END
Tue Jun 07 13:03:39 2016 us=633463   remote_random = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   ipchange = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   dev = 'tun'
Tue Jun 07 13:03:39 2016 us=633463   dev_type = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   dev_node = 'OpenVPN'
Tue Jun 07 13:03:39 2016 us=633463   lladdr = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   topology = 1
Tue Jun 07 13:03:39 2016 us=633463   tun_ipv6 = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   ifconfig_local = 'x.x.x.x'
Tue Jun 07 13:03:39 2016 us=633463   ifconfig_remote_netmask = 'y.y.y.y'
Tue Jun 07 13:03:39 2016 us=633463   ifconfig_noexec = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   ifconfig_nowarn = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   ifconfig_ipv6_local = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   ifconfig_ipv6_netbits = 0
Tue Jun 07 13:03:39 2016 us=633463   ifconfig_ipv6_remote = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   shaper = 0
Tue Jun 07 13:03:39 2016 us=633463   mtu_test = 0
Tue Jun 07 13:03:39 2016 us=633463   mlock = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   keepalive_ping = 10
Tue Jun 07 13:03:39 2016 us=633463   keepalive_timeout = 120
Tue Jun 07 13:03:39 2016 us=633463   inactivity_timeout = 0
Tue Jun 07 13:03:39 2016 us=633463   ping_send_timeout = 10
Tue Jun 07 13:03:39 2016 us=633463   ping_rec_timeout = 240
Tue Jun 07 13:03:39 2016 us=633463   ping_rec_timeout_action = 2
Tue Jun 07 13:03:39 2016 us=633463   ping_timer_remote = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   remap_sigusr1 = 0
Tue Jun 07 13:03:39 2016 us=633463   persist_tun = ENABLED
Tue Jun 07 13:03:39 2016 us=633463   persist_local_ip = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   persist_remote_ip = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   persist_key = ENABLED
Tue Jun 07 13:03:39 2016 us=633463   passtos = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   resolve_retry_seconds = 1000000000
Tue Jun 07 13:03:39 2016 us=633463   username = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   groupname = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   chroot_dir = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   cd_dir = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   writepid = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   up_script = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   down_script = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   down_pre = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   up_restart = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   up_delay = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   daemon = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   inetd = 0
Tue Jun 07 13:03:39 2016 us=633463   log = ENABLED
Tue Jun 07 13:03:39 2016 us=633463   suppress_timestamps = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   nice = 0
Tue Jun 07 13:03:39 2016 us=633463   verbosity = 4
Tue Jun 07 13:03:39 2016 us=633463   mute = 0
Tue Jun 07 13:03:39 2016 us=633463   gremlin = 0
Tue Jun 07 13:03:39 2016 us=633463   status_file = 'openvpn-status.log'
Tue Jun 07 13:03:39 2016 us=633463   status_file_version = 1
Tue Jun 07 13:03:39 2016 us=633463   status_file_update_freq = 60
Tue Jun 07 13:03:39 2016 us=633463   occ = ENABLED
Tue Jun 07 13:03:39 2016 us=633463   rcvbuf = 0
Tue Jun 07 13:03:39 2016 us=633463   sndbuf = 0
Tue Jun 07 13:03:39 2016 us=633463   sockflags = 0
Tue Jun 07 13:03:39 2016 us=633463   fast_io = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   lzo = 0
Tue Jun 07 13:03:39 2016 us=633463   route_script = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   route_default_gateway = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   route_default_metric = 0
Tue Jun 07 13:03:39 2016 us=633463   route_noexec = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   route_delay = 0
Tue Jun 07 13:03:39 2016 us=633463   route_delay_window = 30
Tue Jun 07 13:03:39 2016 us=633463   route_delay_defined = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   route_nopull = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   route_gateway_via_dhcp = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   max_routes = 100
Tue Jun 07 13:03:39 2016 us=633463   allow_pull_fqdn = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   route x.x.x.x/y.y.y.y/nil/nil
Tue Jun 07 13:03:39 2016 us=633463   route x.x.x.x/y.y.y.y/nil/nil
Tue Jun 07 13:03:39 2016 us=633463   management_addr = '127.0.0.1'
Tue Jun 07 13:03:39 2016 us=633463   management_port = 25340
Tue Jun 07 13:03:39 2016 us=633463   management_user_pass = 'stdin'
Tue Jun 07 13:03:39 2016 us=633463   management_log_history_cache = 250
Tue Jun 07 13:03:39 2016 us=633463   management_echo_buffer_size = 100
Tue Jun 07 13:03:39 2016 us=633463   management_write_peer_info_file = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   management_client_user = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   management_client_group = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   management_flags = 6
Tue Jun 07 13:03:39 2016 us=633463   shared_secret_file = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   key_direction = 1
Tue Jun 07 13:03:39 2016 us=633463   ciphername_defined = ENABLED
Tue Jun 07 13:03:39 2016 us=633463   ciphername = 'AES-256-CBC'
Tue Jun 07 13:03:39 2016 us=633463   authname_defined = ENABLED
Tue Jun 07 13:03:39 2016 us=633463   authname = 'SHA1'
Tue Jun 07 13:03:39 2016 us=633463   prng_hash = 'SHA1'
Tue Jun 07 13:03:39 2016 us=633463   prng_nonce_secret_len = 16
Tue Jun 07 13:03:39 2016 us=633463   keysize = 0
Tue Jun 07 13:03:39 2016 us=633463   engine = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   replay = ENABLED
Tue Jun 07 13:03:39 2016 us=633463   mute_replay_warnings = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   replay_window = 64
Tue Jun 07 13:03:39 2016 us=633463   replay_time = 15
Tue Jun 07 13:03:39 2016 us=633463   packet_id_file = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   use_iv = ENABLED
Tue Jun 07 13:03:39 2016 us=633463   test_crypto = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   tls_server = ENABLED
Tue Jun 07 13:03:39 2016 us=633463   tls_client = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   key_method = 2
Tue Jun 07 13:03:39 2016 us=633463   ca_file = 'ca.crt'
Tue Jun 07 13:03:39 2016 us=633463   ca_path = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   dh_file = 'dh4096.pem'
Tue Jun 07 13:03:39 2016 us=633463   cert_file = 'server.crt'
Tue Jun 07 13:03:39 2016 us=633463   extra_certs_file = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   priv_key_file = 'server.key'
Tue Jun 07 13:03:39 2016 us=633463   pkcs12_file = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   cryptoapi_cert = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   cipher_list = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   tls_verify = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   tls_export_cert = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   verify_x509_type = 0
Tue Jun 07 13:03:39 2016 us=633463   verify_x509_name = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   crl_file = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   ns_cert_type = 0
Tue Jun 07 13:03:39 2016 us=633463   remote_cert_ku[i] = 0
Tue Jun 07 13:03:39 2016 us=633463   remote_cert_ku[i] = 0
Tue Jun 07 13:03:39 2016 us=633463   remote_cert_ku[i] = 0
Tue Jun 07 13:03:39 2016 us=633463   remote_cert_ku[i] = 0
Tue Jun 07 13:03:39 2016 us=633463   remote_cert_ku[i] = 0
Tue Jun 07 13:03:39 2016 us=633463   remote_cert_ku[i] = 0
Tue Jun 07 13:03:39 2016 us=633463   remote_cert_ku[i] = 0
Tue Jun 07 13:03:39 2016 us=633463   remote_cert_ku[i] = 0
Tue Jun 07 13:03:39 2016 us=633463   remote_cert_ku[i] = 0
Tue Jun 07 13:03:39 2016 us=633463   remote_cert_ku[i] = 0
Tue Jun 07 13:03:39 2016 us=633463   remote_cert_ku[i] = 0
Tue Jun 07 13:03:39 2016 us=633463   remote_cert_ku[i] = 0
Tue Jun 07 13:03:39 2016 us=633463   remote_cert_ku[i] = 0
Tue Jun 07 13:03:39 2016 us=633463   remote_cert_ku[i] = 0
Tue Jun 07 13:03:39 2016 us=633463   remote_cert_ku[i] = 0
Tue Jun 07 13:03:39 2016 us=633463   remote_cert_ku[i] = 0
Tue Jun 07 13:03:39 2016 us=633463   remote_cert_eku = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   ssl_flags = 0
Tue Jun 07 13:03:39 2016 us=633463   tls_timeout = 2
Tue Jun 07 13:03:39 2016 us=633463   renegotiate_bytes = 0
Tue Jun 07 13:03:39 2016 us=633463   renegotiate_packets = 0
Tue Jun 07 13:03:39 2016 us=633463   renegotiate_seconds = 3600
Tue Jun 07 13:03:39 2016 us=633463   handshake_window = 60
Tue Jun 07 13:03:39 2016 us=633463   transition_window = 3600
Tue Jun 07 13:03:39 2016 us=633463   single_session = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   push_peer_info = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   tls_exit = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   tls_auth_file = 'ta.key'
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_protected_authentication = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_protected_authentication = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_protected_authentication = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_protected_authentication = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_protected_authentication = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_protected_authentication = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_protected_authentication = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_protected_authentication = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_protected_authentication = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_protected_authentication = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_protected_authentication = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_protected_authentication = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_protected_authentication = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_protected_authentication = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_protected_authentication = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_protected_authentication = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_private_mode = 00000000
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_private_mode = 00000000
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_private_mode = 00000000
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_private_mode = 00000000
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_private_mode = 00000000
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_private_mode = 00000000
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_private_mode = 00000000
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_private_mode = 00000000
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_private_mode = 00000000
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_private_mode = 00000000
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_private_mode = 00000000
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_private_mode = 00000000
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_private_mode = 00000000
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_private_mode = 00000000
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_private_mode = 00000000
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_private_mode = 00000000
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_cert_private = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_cert_private = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_cert_private = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_cert_private = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_cert_private = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_cert_private = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_cert_private = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_cert_private = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_cert_private = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_cert_private = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_cert_private = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_cert_private = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_cert_private = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_cert_private = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_cert_private = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_cert_private = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_pin_cache_period = -1
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_id = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   pkcs11_id_management = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   server_network = x.x.x.x
Tue Jun 07 13:03:39 2016 us=633463   server_netmask = y.y.y.y
Tue Jun 07 13:03:39 2016 us=633463   server_network_ipv6 = ::
Tue Jun 07 13:03:39 2016 us=633463   server_netbits_ipv6 = 0
Tue Jun 07 13:03:39 2016 us=633463   server_bridge_ip = 0.0.0.0
Tue Jun 07 13:03:39 2016 us=633463   server_bridge_netmask = 0.0.0.0
Tue Jun 07 13:03:39 2016 us=633463   server_bridge_pool_start = 0.0.0.0
Tue Jun 07 13:03:39 2016 us=633463   server_bridge_pool_end = 0.0.0.0
Tue Jun 07 13:03:39 2016 us=633463   push_entry = 'dhcp-option DNS x.x.x.x'
Tue Jun 07 13:03:39 2016 us=633463   push_entry = 'dhcp-option WINS x.x.x.x'
Tue Jun 07 13:03:39 2016 us=633463   push_entry = 'route x.x.x.x y.y.y.y'
Tue Jun 07 13:03:39 2016 us=633463   push_entry = 'topology net30'
Tue Jun 07 13:03:39 2016 us=633463   push_entry = 'ping 10'
Tue Jun 07 13:03:39 2016 us=633463   push_entry = 'ping-restart 120'
Tue Jun 07 13:03:39 2016 us=633463   ifconfig_pool_defined = ENABLED
Tue Jun 07 13:03:39 2016 us=633463   ifconfig_pool_start = z.z.z.z
Tue Jun 07 13:03:39 2016 us=633463   ifconfig_pool_end = a.a.a.a
Tue Jun 07 13:03:39 2016 us=633463   ifconfig_pool_netmask = 0.0.0.0
Tue Jun 07 13:03:39 2016 us=633463   ifconfig_pool_persist_filename = 'ipp.txt'
Tue Jun 07 13:03:39 2016 us=633463   ifconfig_pool_persist_refresh_freq = 600
Tue Jun 07 13:03:39 2016 us=633463   ifconfig_ipv6_pool_defined = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   ifconfig_ipv6_pool_base = ::
Tue Jun 07 13:03:39 2016 us=633463   ifconfig_ipv6_pool_netbits = 0
Tue Jun 07 13:03:39 2016 us=633463   n_bcast_buf = 256
Tue Jun 07 13:03:39 2016 us=633463   tcp_queue_limit = 64
Tue Jun 07 13:03:39 2016 us=633463   real_hash_size = 256
Tue Jun 07 13:03:39 2016 us=633463   virtual_hash_size = 256
Tue Jun 07 13:03:39 2016 us=633463   client_connect_script = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   learn_address_script = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   client_disconnect_script = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   client_config_dir = 'ccd'
Tue Jun 07 13:03:39 2016 us=633463   ccd_exclusive = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   tmp_dir = 'C:\...\Temp\'
Tue Jun 07 13:03:39 2016 us=633463   push_ifconfig_defined = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   push_ifconfig_local = 0.0.0.0
Tue Jun 07 13:03:39 2016 us=633463   push_ifconfig_remote_netmask = 0.0.0.0
Tue Jun 07 13:03:39 2016 us=633463   push_ifconfig_ipv6_defined = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   push_ifconfig_ipv6_local = ::/0
Tue Jun 07 13:03:39 2016 us=633463   push_ifconfig_ipv6_remote = ::
Tue Jun 07 13:03:39 2016 us=633463   enable_c2c = ENABLED
Tue Jun 07 13:03:39 2016 us=633463   duplicate_cn = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   cf_max = 0
Tue Jun 07 13:03:39 2016 us=633463   cf_per = 0
Tue Jun 07 13:03:39 2016 us=633463   max_clients = 5
Tue Jun 07 13:03:39 2016 us=633463   max_routes_per_client = 256
Tue Jun 07 13:03:39 2016 us=633463   auth_user_pass_verify_script = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   auth_user_pass_verify_script_via_file = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   client = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   pull = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   auth_user_pass_file = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   show_net_up = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   route_method = 0
Tue Jun 07 13:03:39 2016 us=633463   block_outside_dns = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   ip_win32_defined = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   ip_win32_type = 3
Tue Jun 07 13:03:39 2016 us=633463   dhcp_masq_offset = 0
Tue Jun 07 13:03:39 2016 us=633463   dhcp_lease_time = 31536000
Tue Jun 07 13:03:39 2016 us=633463   tap_sleep = 10
Tue Jun 07 13:03:39 2016 us=633463   dhcp_options = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   dhcp_renew = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   dhcp_pre_release = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   dhcp_release = DISABLED
Tue Jun 07 13:03:39 2016 us=633463   domain = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   netbios_scope = '[UNDEF]'
Tue Jun 07 13:03:39 2016 us=633463   netbios_node_type = 0
Tue Jun 07 13:03:39 2016 us=633463   disable_nbt = DISABLED
Tue Jun 07 13:03:39 2016 us=633463 OpenVPN 2.3.11 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on May 10 2016
Tue Jun 07 13:03:39 2016 us=633463 Windows version 6.2 (Windows 8 or greater) 64bit
Tue Jun 07 13:03:39 2016 us=633463 library versions: OpenSSL 1.0.1t  3 May 2016, LZO 2.09
Enter Management Password:
Tue Jun 07 13:03:39 2016 us=638467 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Jun 07 13:03:39 2016 us=638467 Need hold release from management interface, waiting...
Tue Jun 07 13:03:40 2016 us=116010 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Jun 07 13:03:40 2016 us=216592 MANAGEMENT: CMD 'state on'
Tue Jun 07 13:03:40 2016 us=216592 MANAGEMENT: CMD 'log all on'
Tue Jun 07 13:03:40 2016 us=323500 MANAGEMENT: CMD 'hold off'
Tue Jun 07 13:03:40 2016 us=323500 MANAGEMENT: CMD 'hold release'
Tue Jun 07 13:03:40 2016 us=328864 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x.  Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Tue Jun 07 13:03:40 2016 us=425330 Diffie-Hellman initialized with 4096 bit key
Tue Jun 07 13:03:40 2016 us=425330 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Tue Jun 07 13:03:40 2016 us=425330 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jun 07 13:03:40 2016 us=425330 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jun 07 13:03:40 2016 us=425330 TLS-Auth MTU parms [ asdasd ]
Tue Jun 07 13:03:40 2016 us=425330 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Jun 07 13:03:40 2016 us=425330 ROUTE_GATEWAY 192.168.0.1/255.255.255.0 I=17 HWADDR=xxxx
Tue Jun 07 13:03:40 2016 us=425330 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Jun 07 13:03:40 2016 us=425330 MANAGEMENT: >STATE:1465297420,ASSIGN_IP,,x.x.x.x,
Tue Jun 07 13:03:40 2016 us=425330 open_tun, tt->ipv6=0
Tue Jun 07 13:03:40 2016 us=425330 TAP-WIN32 device [OpenVPN] opened: \\.\xxxx\{a.a.a.a}.tap
Tue Jun 07 13:03:40 2016 us=430334 TAP-Windows Driver Version 9.21 
Tue Jun 07 13:03:40 2016 us=430334 TAP-Windows MTU=1500
Tue Jun 07 13:03:40 2016 us=431338 Notified TAP-Windows driver to set a DHCP IP/netmask of x.x.x.x/y.y.y.y on interface {adasda} [DHCP-serv: b.b.b.b, lease-time: 31536000]
Tue Jun 07 13:03:40 2016 us=431838 Sleeping for 10 seconds...
Tue Jun 07 13:03:50 2016 us=437330 Successful ARP Flush on interface [6] {asdasdsa}
Tue Jun 07 13:03:50 2016 us=438333 MANAGEMENT: >STATE:1465297430,ADD_ROUTES,,,
Tue Jun 07 13:03:50 2016 us=438833 C:\WINDOWS\system32\route.exe ADD x.x.x.x MASK y.y.y.y d.d.d.d
Tue Jun 07 13:03:50 2016 us=439833 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Tue Jun 07 13:03:50 2016 us=439833 Route addition via IPAPI succeeded [adaptive]
Tue Jun 07 13:03:50 2016 us=439833 C:\WINDOWS\system32\route.exe ADD x.x.x.x MASK y.y.y.y b.b.b.b
Tue Jun 07 13:03:50 2016 us=440834 ROUTE: route addition failed using CreateIpForwardEntry: El objeto ya existe.   [status=5010 if_index=6]
Tue Jun 07 13:03:50 2016 us=440834 Route addition via IPAPI failed [adaptive]
Tue Jun 07 13:03:50 2016 us=440834 Route addition fallback to route.exe
Tue Jun 07 13:03:50 2016 us=441334 env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
Tue Jun 07 13:03:50 2016 us=459355 Data Channel MTU parms [ asdasd ]
Tue Jun 07 13:03:50 2016 us=459355 UDPv4 link local (bound): [AF_INET]192.168.0.2:1194
Tue Jun 07 13:03:50 2016 us=459355 UDPv4 link remote: [undef]
Tue Jun 07 13:03:50 2016 us=459355 MULTI: multi_init called, r=256 v=256
Tue Jun 07 13:03:50 2016 us=459855 IFCONFIG POOL: base=r.r.r.r size=62, ipv6=0
Tue Jun 07 13:03:50 2016 us=459855 ifconfig_pool_read(), in='SGonzalez,w.w.w.w', TODO: IPv6
Tue Jun 07 13:03:50 2016 us=459855 succeeded -> ifconfig_pool_set()
Tue Jun 07 13:03:50 2016 us=459855 IFCONFIG POOL LIST
Tue Jun 07 13:03:50 2016 us=459855 SGonzalez,t.t.t.t
Tue Jun 07 13:03:50 2016 us=459855 Initialization Sequence Completed
Tue Jun 07 13:03:50 2016 us=459855 MANAGEMENT: >STATE:1465297430,CONNECTED,SUCCESS,x.x.x.x,

Thanks you.

TinCanTech

According to your posted logs, the client cannot connect to the server because the server does not receive any packets from the client. Check your network security .. firewalls etc.

Also:

NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.

Daimroc

Thanks. I will try to check the route conflicts, but I discard problems with the firewall because I have tried disabling the firewall and the problem continue.

About the conflict with the routing, how could I try to solve it?

Thanks.

TinCanTech

Daimroc wroteI discard problems with the firewall because I have tried disabling the firewall and the problem continue

Windows firewall on the client will, typically, allow all outgoing packets (though I may be wrong) but your server firewall is more likely the issue. I presume the ip address the client is trying to connect to is correct (check for typos).

Daimroc wroteAbout the conflict with the routing, how could I try to solve it?

Change your server subnet .. 192.168.0.0/24 is probably the worse choice you can make.

Daimroc

But if the problem is the subnet of the server, Why Can i connect in one computer and with the same version of OpenVpn and the same config folder in another computer doesn't work?

The first computer are in a house and the other computer are in another house, so they are in different lan and wan. But the certificates and configuration is the same because I am using the same config folder.

In the house that does not work, I have tried to open the port 1194 to the router and disabled the firewall in the computer and it does not solve the problem.

Also I have try to disabled the firewall in the server too, but it is the same, if I can connect from a computer and not from another, I guess that the server is not the problem in this case.

But I guess that the problem is not the subnet in the server because I can connect from some places, so I think that if the problem is the subnet server, I couldn't connect from any computer.

Thanks.

TinCanTech

One problem at a time please .. According to the logs you posted:

Server:

Tue Jun 07 13:03:39 2016 us=633463 Current Parameter Settings:
Tue Jun 07 13:03:39 2016 us=633463 config = 'server.ovpn'

* All normal *

Tue Jun 07 13:03:39 2016 us=633463 OpenVPN 2.3.11 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on May 10 2016
Tue Jun 07 13:03:39 2016 us=633463 Windows version 6.2 (Windows 8 or greater) 64bit
Tue Jun 07 13:03:39 2016 us=633463 library versions: OpenSSL 1.0.1t 3 May 2016, LZO 2.09

* All normal *

Tue Jun 07 13:03:50 2016 us=459855 Initialization Sequence Completed
Tue Jun 07 13:03:50 2016 us=459855 MANAGEMENT: >STATE:1465297430,CONNECTED,SUCCESS,x.x.x.x,

Client:

Tue Jun 07 12:57:12 2016 OpenVPN 2.3.11 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on May 10 2016
Tue Jun 07 12:57:12 2016 Windows version 6.2 (Windows 8 or greater) 64bit
Tue Jun 07 12:57:12 2016 library versions: OpenSSL 1.0.1t 3 May 2016, LZO 2.09

* All normal *

Tue Jun 07 12:57:13 2016 UDPv4 link remote: [AF_INET]77.27.58.xxx:1194
Tue Jun 07 12:57:13 2016 MANAGEMENT: >STATE:1465297033,WAIT,,,

At the time you started the client the server was not running ..

Daimroc wroteWhy Can i connect in one computer and with the same version of OpenVpn and the same config folder in another computer doesn't work?

This is the real problem .. something is probably blocking or you have set something up differently at the second client computer .. but I have no idea what.

* For now: Do not concern yourself with the server subnet as that will not stop you from connecting.